---
typeId: req
recordId: benac-enc-011
fields:
  title: Remote compute decryption treated as disclosure
  statement: Benac shall treat remote compute decryption as plaintext disclosure
    to the compute principal and shall require an approved compute lease for
    such disclosure.
  rationale: Encryption cannot protect data after a remote compute host receives
    plaintext or keys.
  verification: Attempt to send decryptable private blob to compute without lease is denied.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 65
---
